CVE-2018-1000544

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-06-26 · updated 2026-06-17
Weakness: CWE-59

Description

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..

Affected products

Debian Linux: 8.0, 9.0
CloudForms: 4.6
Rubyzip Project Rubyzip: through 1.2.1

References

https://access.redhat.com/errata/RHSA-2018:3466
https://github.com/rubyzip/rubyzip/issues/369
https://lists.debian.org/debian-lts-announce/2018/08/msg00013.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00002.html
https://access.redhat.com/errata/RHSA-2018:3466
https://github.com/rubyzip/rubyzip/issues/369
https://lists.debian.org/debian-lts-announce/2018/08/msg00013.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00002.html

Get alerted when CVE-2018-1000544 or the next vulnerability affects your stack